Rv260 Firmware vulnerabilities

8 known vulnerabilities in Rv260 Firmware from Cisco. 8 are rated high or critical, and 3 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Exploited

  CVE-2025-32433Apr 16, 2025ErlangEPSS 98.9%

  Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protoco

• 10.0 Critical severity

  Cisco Small Business RV Series Router Firmware: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-20827Aug 10, 2022CiscoEPSS 1.98%

  Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition on an affected device. For more information ab

• 9.0 Critical severity

  Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers…

  CVE-2022-20841Aug 10, 2022CiscoEPSS 3.43%

  Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition on an affected device. For more information ab

• 8.1 High severity

  Cisco Small Business RV Series Router Firmware: Out-of-bounds Write

  CVE-2022-20706Feb 10, 2022CiscoEPSS 5.57%

  Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot

• 9.8 Critical severity

  Cisco Small Business RV Series Router Firmware: Out-of-bounds Write

  CVE-2022-20705Feb 10, 2022CiscoEPSS 80%

  Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot

• 8.0 High severity

  Cisco Small Business RV Series Routers Stack-based Buffer Overflow Exploited

  CVE-2022-20703Feb 10, 2022CiscoEPSS 9.2%

  Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot

• 7.2 High severity

  Cisco Small Business RV Series Router Firmware: Out-of-bounds Write

  CVE-2022-20702Feb 10, 2022CiscoEPSS 4.6%

  Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot

• 9.8 Critical severity

  Cisco Small Business RV Series Routers Stack-based Buffer Overflow Exploited

  CVE-2022-20700Feb 10, 2022CiscoEPSS 5.66%

  Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot